Windows 10 Version 22H2
- Software type
- Operating system
- Total vulnerabilities (90 days)
- Products & ServicesProducts & Services
- SolutionsSolutions
- PricingPricing
- CompanyCompany
- ResourcesResources
en
en
As of 11/09/2026, Windows 10 Version 22H2 recorded 685 security vulnerabilities in the last 90 days, of which 525 are rated High or Critical. Notably, 2 of these vulnerabilities are actively exploited (KEV) according to CISA's catalog. CyStack recommends that organizations and individual users apply patches as soon as possible.
CyStack does not yet have sufficient official-source data to identify the latest version of Windows 10 Version 22H2 and determine which vulnerabilities affect that version.
CyStack VulnScan continuously discovers assets, validates vulnerabilities, and helps security teams prioritize remediation across the organization.
CVE-2025-21377NTLM Hash Disclosure Spoofing VulnerabilityCVE-2025-21376Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution VulnerabilityCVE-2025-21375Kernel Streaming WOW Thunk Service Driver Elevation of Privilege VulnerabilityCVE-2025-21373Windows Installer Elevation of Privilege VulnerabilityCVE-2025-21371Windows Telephony Service Remote Code Execution Vulnerability| Vulnerability | Exploitation status | Fix | Published | Severity |
|---|---|---|---|---|
CVE-2025-21377NTLM Hash Disclosure Spoofing Vulnerability | Exploitation statusNot exploited | FixYes |
| SeverityMedium |
CVE-2025-21376Windows Lightweight Directory Access Protocol (LDAP) Remote Code Execution Vulnerability | Exploitation statusNot exploited | FixYes | Published02/11/2025 | SeverityHigh |
|---|
CVE-2025-21375Kernel Streaming WOW Thunk Service Driver Elevation of Privilege Vulnerability | Exploitation statusNot exploited | FixYes | Published02/11/2025 | SeverityHigh |
|---|
CVE-2025-21373Windows Installer Elevation of Privilege Vulnerability | Exploitation statusNot exploited | FixYes | Published02/11/2025 | SeverityHigh |
|---|
CVE-2025-21371Windows Telephony Service Remote Code Execution Vulnerability | Exploitation statusNot exploited | FixYes | Published02/11/2025 | SeverityHigh |
|---|
CVE-2025-21369Microsoft Digest Authentication Remote Code Execution Vulnerability | Exploitation statusNot exploited | FixYes | Published02/11/2025 | SeverityHigh |
|---|
CVE-2025-21368Microsoft Digest Authentication Remote Code Execution Vulnerability | Exploitation statusNot exploited | FixYes | Published02/11/2025 | SeverityHigh |
|---|
CVE-2025-21359Windows Kernel Security Feature Bypass Vulnerability | Exploitation statusNot exploited | FixYes | Published02/11/2025 | SeverityHigh |
|---|
CVE-2025-21352Internet Connection Sharing (ICS) Denial of Service Vulnerability | Exploitation statusNot exploited | FixYes | Published02/11/2025 | SeverityMedium |
|---|
CVE-2025-21350Windows Kerberos Denial of Service Vulnerability | Exploitation statusNot exploited | FixYes | Published02/11/2025 | SeverityMedium |
|---|
CVE-2025-21337Windows NTFS Elevation of Privilege Vulnerability | Exploitation statusNot exploited | FixYes | Published02/11/2025 | SeverityLow |
|---|
CVE-2025-21201Windows Telephony Server Remote Code Execution Vulnerability | Exploitation statusNot exploited | FixYes | Published02/11/2025 | SeverityHigh |
|---|
CVE-2025-21200Windows Telephony Service Remote Code Execution Vulnerability | Exploitation statusNot exploited | FixYes | Published02/11/2025 | SeverityHigh |
|---|
CVE-2025-21190Windows Telephony Service Remote Code Execution Vulnerability | Exploitation statusNot exploited | FixYes | Published02/11/2025 | SeverityHigh |
|---|
CVE-2025-21181Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability | Exploitation statusNot exploited | FixYes | Published02/11/2025 | SeverityHigh |
|---|
CVE-2025-21417Windows Telephony Service Remote Code Execution Vulnerability | Exploitation statusNot exploited | FixYes | Published01/14/2025 | SeverityHigh |
|---|
CVE-2025-21409Windows Telephony Service Remote Code Execution Vulnerability | Exploitation statusNot exploited | FixYes | Published01/14/2025 | SeverityHigh |
|---|
CVE-2025-21389Windows Universal Plug and Play (UPnP) Device Host Denial of Service Vulnerability | Exploitation statusNot exploited | FixYes | Published01/14/2025 | SeverityHigh |
|---|
CVE-2025-21339Windows Telephony Service Remote Code Execution Vulnerability | Exploitation statusNot exploited | FixYes | Published01/14/2025 | SeverityHigh |
|---|
CVE-2025-21338GDI+ Remote Code Execution Vulnerability | Exploitation statusNot exploited | FixYes | Published01/14/2025 | SeverityHigh |
|---|
CVE-2025-21336Windows Cryptographic Information Disclosure Vulnerability | Exploitation statusNot exploited | FixYes | Published01/14/2025 | SeverityMedium |
|---|
CVE-2025-21332MapUrlToZone Security Feature Bypass Vulnerability | Exploitation statusNot exploited | FixYes | Published01/14/2025 | SeverityMedium |
|---|
CVE-2025-21331Windows Installer Elevation of Privilege Vulnerability | Exploitation statusNot exploited | FixYes | Published01/14/2025 | SeverityHigh |
|---|
CVE-2025-21329MapUrlToZone Security Feature Bypass Vulnerability | Exploitation statusNot exploited | FixYes | Published01/14/2025 | SeverityMedium |
|---|
CVE-2025-21328MapUrlToZone Security Feature Bypass Vulnerability | Exploitation statusNot exploited | FixYes | Published01/14/2025 | SeverityMedium |
|---|
CVE-2025-21324Windows Digital Media Elevation of Privilege Vulnerability | Exploitation statusNot exploited | FixYes | Published01/14/2025 | SeverityMedium |
|---|
CVE-2025-21310Windows Digital Media Elevation of Privilege Vulnerability | Exploitation statusNot exploited | FixYes | Published01/14/2025 | SeverityMedium |
|---|
CVE-2025-21307Windows Reliable Multicast Transport Driver (RMCAST) Remote Code Execution Vulnerability | Exploitation statusNot exploited | FixYes | Published01/14/2025 | SeverityCritical |
|---|
CVE-2025-21305Windows Telephony Service Remote Code Execution Vulnerability | Exploitation statusNot exploited | FixYes | Published01/14/2025 | SeverityHigh |
|---|
CVE-2025-21300Windows Universal Plug and Play (UPnP) Device Host Denial of Service Vulnerability | Exploitation statusNot exploited | FixYes | Published01/14/2025 | SeverityHigh |
|---|
CVE-2025-21287Windows Installer Elevation of Privilege Vulnerability | Exploitation statusNot exploited | FixYes | Published01/14/2025 | SeverityHigh |
|---|
CVE-2025-21286Windows Telephony Service Remote Code Execution Vulnerability | Exploitation statusNot exploited | FixYes | Published01/14/2025 | SeverityHigh |
|---|
CVE-2025-21276Windows MapUrlToZone Denial of Service Vulnerability | Exploitation statusNot exploited | FixYes | Published01/14/2025 | SeverityHigh |
|---|
CVE-2025-21273Windows Telephony Service Remote Code Execution Vulnerability | Exploitation statusNot exploited | FixYes | Published01/14/2025 | SeverityHigh |
|---|
CVE-2025-21261Windows Digital Media Elevation of Privilege Vulnerability | Exploitation statusNot exploited | FixYes | Published01/14/2025 | SeverityMedium |
|---|
CVE-2025-21256Windows Digital Media Elevation of Privilege Vulnerability | Exploitation statusNot exploited | FixYes | Published01/14/2025 | SeverityMedium |
|---|
CVE-2025-21250Windows Telephony Service Remote Code Execution Vulnerability | Exploitation statusNot exploited | FixYes | Published01/14/2025 | SeverityHigh |
|---|
CVE-2025-21246Windows Telephony Service Remote Code Execution Vulnerability | Exploitation statusNot exploited | FixYes | Published01/14/2025 | SeverityHigh |
|---|
CVE-2025-21245Windows Telephony Service Remote Code Execution Vulnerability | Exploitation statusNot exploited | FixYes | Published01/14/2025 | SeverityHigh |
|---|
CVE-2025-21240Windows Telephony Service Remote Code Execution Vulnerability | Exploitation statusNot exploited | FixYes | Published01/14/2025 | SeverityHigh |
|---|
CVE-2025-21238Windows Telephony Service Remote Code Execution Vulnerability | Exploitation statusNot exploited | FixYes | Published01/14/2025 | SeverityHigh |
|---|
CVE-2025-21232Windows Digital Media Elevation of Privilege Vulnerability | Exploitation statusNot exploited | FixYes | Published01/14/2025 | SeverityMedium |
|---|
CVE-2025-21231IP Helper Denial of Service Vulnerability | Exploitation statusNot exploited | FixYes | Published01/14/2025 | SeverityHigh |
|---|
CVE-2025-21230Microsoft Message Queuing (MSMQ) Denial of Service Vulnerability | Exploitation statusNot exploited | FixYes | Published01/14/2025 | SeverityHigh |
|---|
CVE-2025-21228Windows Digital Media Elevation of Privilege Vulnerability | Exploitation statusNot exploited | FixYes | Published01/14/2025 | SeverityMedium |
|---|
CVE-2025-21227Windows Digital Media Elevation of Privilege Vulnerability | Exploitation statusNot exploited | FixYes | Published01/14/2025 | SeverityMedium |
|---|
CVE-2025-21226Windows Digital Media Elevation of Privilege Vulnerability | Exploitation statusNot exploited | FixYes | Published01/14/2025 | SeverityMedium |
|---|
CVE-2025-21223Windows Telephony Service Remote Code Execution Vulnerability | Exploitation statusNot exploited | FixYes | Published01/14/2025 | SeverityHigh |
|---|
CVE-2025-21220Microsoft Message Queuing Information Disclosure Vulnerability | Exploitation statusNot exploited | FixYes | Published01/14/2025 | SeverityHigh |
|---|
CVE-2025-21217Windows NTLM Spoofing Vulnerability | Exploitation statusNot exploited | FixYes | Published01/14/2025 | SeverityMedium |
|---|
1,889 Results | Page 28 of 38